Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.mft
File: S92aEzqSSGoU7cTnYlsk-V04kcw.mft (raw, json)
Hash identifier: ZLVimKvlPSbB+58Rb3Xr+U3evBq0P/2OYjA5dtPvj6w=
Subject key identifier: 31:90:92:89:BA:B5:38:26:04:FC:C7:1F:E8:99:6D:92:2C:25:6D:1F
Authority key identifier: 4B:DD:9A:13:3A:92:48:6A:14:ED:C4:E7:62:5B:24:F9:5D:38:91:CC
Certificate issuer: /CN=4bdd9a133a92486a14edc4e7625b24f95d3891cc
Certificate serial: 0196C20285E67CA5CE9536ECD5A8955E25FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S92aEzqSSGoU7cTnYlsk-V04kcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.mft
Manifest number: 0721
Signing time: Mon 12 May 2025 01:01:07 +0000
Manifest this update: Mon 12 May 2025 01:01:07 +0000
Manifest next update: Tue 13 May 2025 01:01:07 +0000
Files and hashes: 1: S92aEzqSSGoU7cTnYlsk-V04kcw.crl (hash: RhgHRTsLZLNfq4OlEObmGjMKZzS7I/GKFTgf5piesg4=)
2: takXMVWWq86gQFEdW1EUOBKN5bA.roa (hash: aj1iYELR5J1LrrkI2DJAheQdQ03iRDb31bSm3xq1fzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/S92aEzqSSGoU7cTnYlsk-V04kcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:02:85:e6:7c:a5:ce:95:36:ec:d5:a8:95:5e:25:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bdd9a133a92486a14edc4e7625b24f95d3891cc
Validity
Not Before: May 12 01:01:07 2025 GMT
Not After : May 13 01:01:07 2025 GMT
Subject: CN=31909289bab5382604fcc71fe8996d922c256d1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ed:ce:4e:c9:77:a2:da:b0:3b:fa:c6:5b:e1:
53:9d:59:df:ec:ab:2d:42:ee:5e:f5:9d:14:ec:2c:
2f:fc:f1:a6:d8:b1:f6:fb:5a:4b:ed:cb:55:ec:c3:
59:59:97:71:b6:cf:4d:66:12:ac:7b:ab:fa:aa:af:
64:c6:59:cf:45:b3:6f:d8:1d:7b:0b:27:75:bb:26:
fc:22:ae:d4:15:4b:8a:88:50:3d:27:df:47:93:78:
a9:94:ec:09:19:ea:10:c2:88:bd:57:90:ea:ac:94:
bb:d6:e5:73:b8:6f:5d:54:f1:45:df:f5:dc:c0:53:
32:9e:8a:59:e7:13:bd:93:c9:6e:28:3c:b7:21:2a:
55:03:c0:8a:e3:28:22:18:a7:de:45:f0:91:06:32:
12:ea:ca:96:19:00:d0:ca:d5:bc:03:6a:0c:e1:05:
b9:91:26:f1:12:76:39:26:8f:65:36:e8:b0:b3:2e:
40:c6:23:60:cd:0c:1e:37:60:2f:52:d1:b8:d7:15:
c3:d0:51:d3:e8:27:ca:8b:5c:5b:38:d4:c1:53:3a:
b9:2f:9e:06:24:e4:0f:33:f1:9a:9a:2c:42:ec:d1:
35:be:b8:0d:54:de:b8:e3:ed:e0:6b:c6:06:c7:5e:
ee:dd:ba:a8:61:e0:34:92:44:fb:4e:e0:26:44:25:
f7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:90:92:89:BA:B5:38:26:04:FC:C7:1F:E8:99:6D:92:2C:25:6D:1F
X509v3 Authority Key Identifier:
keyid:4B:DD:9A:13:3A:92:48:6A:14:ED:C4:E7:62:5B:24:F9:5D:38:91:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S92aEzqSSGoU7cTnYlsk-V04kcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:36:48:df:d2:b8:58:9d:36:11:e2:83:1c:9a:cc:d0:00:d7:
95:e3:46:47:10:63:0b:be:df:c3:10:65:19:2e:81:29:20:bb:
32:6a:b0:89:f2:53:23:da:f8:91:b5:b1:0d:b5:4d:1f:93:f1:
65:b9:33:ec:79:8e:a8:f0:4d:dc:b4:c8:bc:06:ab:e2:fd:fc:
2f:2c:b4:38:b3:6b:e8:ab:77:c9:c2:ea:78:c4:20:90:63:38:
28:a4:65:53:f8:20:5b:35:af:1f:ae:eb:7f:bd:c6:02:22:e0:
e3:7c:18:35:89:25:df:57:b4:3b:fd:4f:0c:1e:84:e5:ad:cb:
53:75:d0:1c:b9:fa:18:65:4f:d3:e1:0f:fd:b7:22:cb:79:8e:
39:23:87:08:9f:46:f3:0a:f5:b2:ce:42:1d:c6:fb:1f:7f:7a:
52:76:7a:2b:a9:63:0a:83:28:c5:e5:0e:ec:e9:28:d9:3a:2e:
8d:75:90:55:39:d3:08:cf:d7:da:2d:3d:5e:7e:5c:bf:e4:c4:
77:6d:7b:50:86:70:3a:dc:cc:72:94:f1:96:9b:5a:62:9c:33:
94:e0:a3:84:9a:b0:3b:75:05:ea:fb:2a:2c:70:a2:fe:34:b7:
f1:5b:4b:37:11:db:2c:92:32:46:0f:c0:34:2e:00:5e:90:60:
56:e1:59:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:18:18 2025 by rpki-client